AWS ‐ Security Controls

Objectives

Cloud Security Policies

Best Practices for Endpoint Security

• Always use HTTPs
• Enforce Strong Authentication
• Use on-way password hashing
• Utilize Rate Limiting
• Require IP Filtering
• Apply Input Validation

Passwords

Account Lockout Policies

• Controlling Access
  • Blacklisting
  • Whitelisting

Cloud User Permissions

HIDS (Host-based Intrusion Detection Systems)

• It evaluates the incoming and outgoing traffic of the host

• It uses Signature based detection

• Monitor and analyze systems

• Monitor and analyze network packets

HIPS (Host-based Intrusion Prevention Systems)

• It protects the network systems

Hardened Baselines for App Security